
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8440a229-96f8-4a89-b068-a25fe646532e.roa
File: 8440a229-96f8-4a89-b068-a25fe646532e.roa (raw, json)
Hash identifier: bumdRk9sWYxqjQK2ELdsObWYRyNxC9DV949R0g59EfM=
Subject key identifier: 52:75:37:21:8B:C7:8B:9B:08:47:50:BA:20:0D:D6:CE:7F:0E:5A:22
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 655D564C431F9E002526DEDA82D3DC98CF4DCA90
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8440a229-96f8-4a89-b068-a25fe646532e.roa
Signing time: Wed 11 Feb 2026 00:00:09 +0000
ROA not before: Wed 11 Feb 2026 00:00:09 +0000
ROA not after: Tue 12 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2406:dab8:b000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 00:10:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:5d:56:4c:43:1f:9e:00:25:26:de:da:82:d3:dc:98:cf:4d:ca:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Feb 11 00:00:09 2026 GMT
Not After : May 12 23:59:59 2026 GMT
Subject: serialNumber=59111f562a09cf936aa1327e11502ffa1588768f0ea9482a74291a1d59139d0a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:b5:8f:8d:b7:40:ad:41:4c:39:5c:19:85:
05:6d:08:40:76:d6:40:ac:42:37:74:16:92:a9:3b:
27:bc:88:46:ac:50:3e:2e:f8:b6:c8:92:c0:f9:ef:
5a:67:06:d7:25:87:bf:44:d3:94:b6:67:c6:a0:7d:
88:d5:f0:a2:7f:34:5e:e1:64:1c:61:2d:28:86:b8:
7d:1a:3e:79:a5:bb:b8:a4:7a:cd:3c:87:a8:bb:27:
79:09:91:f7:0f:a7:b8:6d:af:1d:01:59:f3:e4:bb:
c6:1d:d4:ae:44:da:3e:d9:62:6f:0a:c4:c4:0e:e3:
e1:9c:d7:92:10:2a:8a:92:a0:99:22:5f:99:04:33:
3b:b7:6b:d4:73:23:ad:e7:f3:17:0c:21:72:53:d7:
72:b2:fc:2f:de:fc:34:32:be:5d:a3:81:0f:b9:c6:
2c:22:1a:0d:12:b8:1c:d6:87:9c:97:72:4c:5c:92:
57:c1:1f:e4:82:9e:f7:9d:d6:36:95:0e:9d:3f:51:
d3:1b:15:12:36:97:5c:68:ec:01:8c:b2:44:ef:c9:
c2:4b:38:4d:8e:c8:cb:99:83:9f:1b:b4:db:50:5f:
ce:63:cf:8e:bd:04:b0:95:58:a0:2b:e1:ff:ac:52:
02:86:f5:b5:69:e8:7e:18:5c:f3:5d:b9:81:4f:84:
3e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:75:37:21:8B:C7:8B:9B:08:47:50:BA:20:0D:D6:CE:7F:0E:5A:22
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8440a229-96f8-4a89-b068-a25fe646532e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:dab8:b000::/40
Signature Algorithm: sha256WithRSAEncryption
29:82:c0:b0:20:5a:0c:a4:e9:aa:80:37:b2:4b:2e:13:a2:05:
20:e4:e6:94:f7:52:72:05:c9:37:59:20:62:39:67:57:f6:11:
1f:ee:df:d5:8c:cd:4c:28:af:63:6c:de:30:82:e6:c7:e9:0f:
cb:03:28:49:78:38:d4:92:37:04:0a:f1:72:45:70:4c:9b:51:
fd:ab:d4:12:9c:4b:d8:9a:9b:c0:23:4e:02:eb:21:6b:7a:2c:
25:71:44:83:be:4b:f0:15:0c:96:97:b5:1d:ad:d2:1b:63:41:
b4:ef:a4:43:a8:0c:ff:46:de:db:e8:75:e7:5d:cc:40:32:88:
4d:d4:2a:4c:f3:85:80:4a:fc:9a:23:b2:83:47:cf:cb:34:47:
e6:69:3b:f3:40:95:c7:61:3f:5f:65:d9:2b:96:60:f6:ea:b9:
e4:7c:62:61:28:6c:8f:08:9d:54:59:4e:22:d9:c4:08:05:64:
10:e7:68:27:36:72:6f:41:ed:7c:ba:ee:58:b9:bf:b5:c8:1c:
b1:0e:de:43:b5:b8:5e:91:11:7a:54:80:63:51:78:02:4f:ea:
bb:90:33:ba:c1:dd:ab:78:42:14:46:b7:98:1e:60:ba:dd:9d:
5c:45:84:ce:2b:30:6f:45:9a:cf:ec:d9:79:f4:70:c5:19:d3:
ec:0d:5e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:52:16 2026 by rpki-client